Re: [tboot-devel] tboot error

[Cihula, J. <jos...@in...>]

Some BIOSes may not have a an option to enable VT-d and may either always enable it or tie it to VT.

After enabling VT and the TPM (which should then allow you to enable TXT), give tboot another try and see if you still get an error.  And if you get a reset after “executing GETSEC[SENTER]…” then let it reboot and execute tboot again, saving the serial output from both boots (tboot will print the TXT.ERRORCODE when it runs).

Joe

From: Wang, Shane [mailto:sha...@in...]
Sent: Monday, November 22, 2010 10:44 PM
To: Prashant Kulkarni; tbo...@li...
Subject: Re: [tboot-devel] tboot error

Yes, VT-d is required to run tboot.

Please check other menus like PCI device, North Bridge, etc to see whether you can find VT-d option.

Thanks.
Shane
________________________________
From: Prashant Kulkarni [mailto:pra...@gm...]
Sent: 2010年11月23日 13:16
To: Wang, Shane; tbo...@li...
Subject: Re: [tboot-devel] tboot error
Thank you very much for the quick response.

 i enabled the following feature in BIOS

a) Embedded Security Device Support
b) Virtualization Technology  (VT- X)

but there is no option for Virtualization Technology Directed I/O (VT- D)

so my doubt is Virtualization Technology Directed I/O (VT- D) is it required to install tboot ?


-- Prashant Kulkarni


2010/11/23 Wang, Shane <sha...@in...<mailto:sha...@in...>>
Please check your BIOS.

It seems your BIOS has disabled TXT. If so, enable it.

Thanks.
Shane
________________________________
From: Prashant Kulkarni [mailto:pra...@gm...<mailto:pra...@gm...>]
Sent: 2010年11月22日 14:45
To: tbo...@li...<mailto:tbo...@li...>
Subject: [tboot-devel] tboot error
Hello all,

I am trying installing tboot, but I have several problems. My PC is HP Compaq 6000 Pro microtower ("Intel Core-2-due E8400 processor" and "Intel Q43 chipset")  with Fedora 13.

I have downloaded SINIT(Q45_Q43_SINIT_19.BIN) and tboot-20101005.tar.gz.

I compiled the "tboot-20101005" sorce code and  following is my grub.conf I have modified.

title Fedora (2.6.36 )
    root (hd0,0)
    kernel /tboot.gz logging=serial,vga,memory
    module /vmlinuz-2.6.36 ro root=LABEL=/ rhgb quiet intel_iommu=on console=ttyS0,115200
    module /initrd-2.6.36.img
    module /Q45_Q43_SINIT_19.BIN


But I am getting following error message whenever booting this kernel,


TBOOT:mod_num:0
TBOOT:PCR:None
TBOOT:hash_Type:TB_HType_Any
TBOOT:num hashesh:0
TBOOT:policy entry [1]
TBOOT:mod_num any
TBOOT:pcr:19
TBOOT:hash_Type:TB_HType_Any
TBOOT:num_hashesh:0
TBOOT:TPM: Write n11 20000002, offset 000000,000004 bytes return=000000
TBOOT:CPU is SMX_capable
TBOOT:Error:SENTERT disabled by feature control MSR(d)
TBOOT:SMX not supported
TBOOT:no LCP Module found
TBOOT:Error: ELF margin number not matched
TBOOT:Assuming kernel is linux format
TBOOT:initrd from 0x7b208000 to 0x7b9a1400
TBOOT:kernel (procted mode) from 0x0c000000 to 0xf415c0
TBOOT:kernel (real mode) from 0x90000 to 0x94200
TBOOT:Trasfering control to kernel !0xc00000


Can someone help me solve this problem?
Do you have any suggestions?

Thanks very much.


-- Prashant Kulkarni